GHSA-wcp5-m52f-mhh5

ghsaUSosv

Improper Restriction of XML External Entity Reference in MPXJ

view advisory published 2021-05-07Licence: CC-BY-4.0

"MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components."

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-25020US	critical9.8	2.59% (85th)	—	2020-08-29
MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.